CVE-2014-4157

arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure _TIF_SECCOMP checks on the fast system-call path, which allows local users to bypass intended PR_SET_SECCOMP restrictions by executing a crafted application without invoking a trace or audit subsystem.

• CWE-264

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=137f7df8cead00688524c82360930845396b8a21
• http://openwall.com/lists/oss-security/2014/06/16/1Mailing List, Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.8Vendor Advisory
• http://www.openwall.com/lists/oss-security/2014/06/17/17Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751417Issue Tracking, Mailing List, Third Party Advisory
• https://github.com/torvalds/linux/commit/137f7df8cead00688524c82360930845396b8a21Exploit, Patch
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=137f7df8cead00688524c82360930845396b8a21
• http://openwall.com/lists/oss-security/2014/06/16/1Mailing List, Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.8Vendor Advisory
• http://www.openwall.com/lists/oss-security/2014/06/17/17Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751417Issue Tracking, Mailing List, Third Party Advisory
• https://github.com/torvalds/linux/commit/137f7df8cead00688524c82360930845396b8a21Exploit, Patch

Published

Jun 23, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4151The av-centerd SOAP service in AlienVault OSSIM before 4.8.0…
• CVE-2014-4152The av-centerd SOAP service in AlienVault OSSIM before 4.8.0…
• CVE-2014-4153The av-centerd SOAP service in AlienVault OSSIM before 4.8.0…
• CVE-2014-4154ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK store…
• CVE-2014-4155Cross-site request forgery (CSRF) vulnerability in the ZTE Z…
• CVE-2014-4156Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration…5.3
• CVE-2014-4158Stack-based buffer overflow in Kolibri 2.0 allows remote att…
• CVE-2014-4159Open redirect vulnerability in in la/umTestSSO.jsp in SAP Su…
• CVE-2014-4160Multiple cross-site scripting (XSS) vulnerabilities in the t…
• CVE-2014-4161Cross-site scripting (XSS) vulnerability in la/umTestSSO.jsp…
• CVE-2014-4162Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2014-4163Multiple cross-site request forgery (CSRF) vulnerabilities i…